serapath
commented
4 years ago 
- browser online => most insecure (= things can change while you visit the page)
- browser localhost => more secure (= things won't change while you visit if you don't confirm)
- datdot app: electron webapp => still secure (= but custom browser we maintain - so careful)
- datdot app: electron process => full power while running (=we have to be most careful, it has access to the users system)
- datdot app: daemons => full power all the time (these are already defined in scope and mostly implemented)